Yalla Privacy Policy
Effective September 12, 2026. Yalla is operated by Sankalp Jain under the Google Play developer name Billion Flow. Contact: sankalpyt02@gmail.com.
Yalla provides Arabic learning with Hindi explanations. The website currently offers guest learning. Account and subscription features are available only when explicitly enabled in the app.
Information we use
- Learning data: lesson completion, revision history, preferences and saved phrases are stored on your device. When account services are enabled and you sign in, progress and preferences can be stored in our database.
- Account data: your mobile number is used for one-time SMS verification. Our SMS provider receives the number and verification message. We store a protected code digest, expiry and attempt count, not a plain-text verification code.
- Subscription data: when Google Play purchases are enabled, we receive purchase identifiers, product, status and expiry to verify access. Google handles your payment details; Yalla does not collect card numbers or UPI PINs.
- Usage and technical data: learning events, campaign attribution, request IP addresses and error information may be processed for service operation, security and measuring product usage. Our analytics sanitization removes sensitive fields such as phone numbers, authentication tokens and speech transcripts from event properties.
- Support: we receive the email address and information you choose to send us.
Microphone and speech
Speaking practice is optional. Microphone access is requested when you choose to speak. Your browser or operating-system speech service may process audio on its servers under its own privacy policy. Yalla does not store the voice recording or send recognized speech to its analytics. Recognized text is used on your device to compare words with the learning example. You can continue without a speaking assessment.
Service providers and sharing
Cloudflare hosts the website and processes delivery and security logs. When enabled, Neon stores account records; MSG91 delivers verification SMS; Google Play processes subscriptions; and Sentry processes sanitized error reports. Email support is handled through Gmail. Providers may process information outside your country. We share information needed to provide these services, respond to legal obligations or protect users. We do not sell personal information.
Retention and deletion
Guest learning data stays on your device until you clear it or your browser removes it. Account information is kept while your account is active. Confirmed in-app account deletion removes the account, progress, attribution and account-linked subscription records from the active database and invalidates existing sessions. It removes account-linked analytics and OTP records and strips raw personal payloads from retained payment records. Disassociated financial records may be retained where needed for accounting, refunds, disputes or legal obligations. Provider-managed transaction records and support correspondence follow those providers' retention policies and applicable obligations.
You can request deletion without installing the app or signing in by contacting sankalpyt02@gmail.com. We may ask for limited information to verify ownership. We explain any records that must be retained and the expected processing time when handling the request. Do not send passwords, OTPs, card details or identity documents in your first message.
Delete an account or request data deletion
Your choices
You can use guest learning, decline microphone permission, clear browser data, ask to access or correct account information, and request account/data deletion. Deleting Yalla does not cancel a Google Play subscription; manage renewals in Google Play separately.
Children
Yalla is intended for adults preparing for work and daily life. It is not designed for children. Contact us if a child has provided personal information so we can investigate and remove it.
Changes and questions
We update this page when our practices change and revise its effective date. Contact sankalpyt02@gmail.com about privacy, access, correction or deletion.